They still can register a new account, just need to clean their Cookies. Usually Spam Bots or things you don't need and want are small tools that work with a long proxy list, place their content, clean Cookies & Cache, do the next run.
Just - if someone knows a little bit more about how Login & Sessions work there's no way of banning someone completely without the chance to register again with another account.